Legal

Privacy Policy

Last updated: 3 March 2026  ·  Law Lab Africa LLC

This Privacy Policy explains how Law Lab Africa LLC ("Law Lab Africa", "we", "us", or "our") collects, uses, stores, and protects personal data when you visit www.lawlab.africa or interact with us through this website.

We take data protection seriously. As a technology compliance consultancy, we hold ourselves to the same standards we advise our clients to meet. This policy is designed to comply with applicable data protection laws including the EU General Data Protection Regulation (GDPR), the South African Protection of Personal Information Act (POPIA), the Nigerian Data Protection Act 2023 (NDPA), the Kenyan Data Protection Act 2019, and other applicable African data protection frameworks.

1. Who We Are

2. What Personal Data We Collect

We collect personal data only when you voluntarily provide it to us through the contact form on this website. The data we collect includes:

• Full name
• Email address
• Organisation name (optional)
• Inquiry type (selected from a dropdown)
• Message content

We do not collect sensitive personal data (as defined under applicable African data protection laws) through this website. We do not collect payment card information, biometric data, health data, or any other special category data via this site.

3. How We Collect Your Data

Personal data is collected through:

• Contact form submissions: When you complete and submit the contact form on this website, your browser opens your email client with a pre-populated message addressed to info@lawlab.africa. No data passes through any third-party server. The email is sent directly from your own email client to us.
• Direct email contact: If you email us directly at info@lawlab.africa.

We do not use tracking cookies, analytics tools, or advertising pixels on this website. We do not use Google Analytics or any equivalent service.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent (Article 6(1)(a) GDPR; s.25 NDPA; s.11(1)(a) POPIA): When you submit the contact form, you provide explicit consent to the collection and processing of your personal data for the purpose of responding to your enquiry. You may withdraw consent at any time by emailing info@lawlab.africa.
• Legitimate interests: We may retain correspondence for a reasonable period to manage our business relationship with you, where this does not override your rights and freedoms.

5. How We Use Your Data

We use your personal data solely to:

• Respond to your enquiry
• Follow up on services you have expressed interest in
• Comply with applicable legal obligations

We do not use your data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Data Storage and Security

Contact form submissions are delivered directly to our email inbox and are not stored on any third-party platform's servers. Email correspondence is stored within our secure email system.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include access controls, secure email practices, and regular security reviews.

7. Data Retention

We retain personal data submitted through the contact form for as long as necessary to respond to your enquiry and manage any resulting business relationship, and no longer than 3 years from the date of last contact unless a longer retention period is required by law.

You may request deletion of your data at any time (see Your Rights below).

8. International Data Transfers

Law Lab Africa LLC is a US-registered entity. If you are located in the European Union, the United Kingdom, or an African jurisdiction with data protection laws governing cross-border transfers, please note that your personal data may be processed outside your home country. We take appropriate steps to ensure that any such transfer is subject to adequate safeguards consistent with applicable law.

9. Your Rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request that we limit how we use your data
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing
• Right to data portability: Receive your data in a portable format (where applicable)

These rights apply under the GDPR, POPIA, NDPA, Kenya DPA, and equivalent African data protection frameworks where applicable. To exercise any of these rights, contact us at info@lawlab.africa. We will respond within 21 days (the standard under most African data protection frameworks) and no later than 30 days.

10. Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. This includes:

• Kenya: Office of the Data Protection Commissioner (ODPC)
• Nigeria: Nigeria Data Protection Commission (NDPC)
• South Africa: Information Regulator
• Rwanda: Rwanda Utilities Regulatory Authority (RURA)
• Ghana: Data Protection Commission
• EU/EEA: Your national supervisory authority

We would, however, appreciate the opportunity to address your concerns before you approach a regulator. Please contact us first at info@lawlab.africa.

11. Third-Party Links

This website contains links to third-party websites including the Data Protection Digest Africa newsletter (dataprotectiondigest.africa) and course platform (Teachable). We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of this website after changes are posted constitutes acceptance of the updated policy.

13. Contact